China trip guide
What is the Great Firewall of China?
The Great Firewall is the informal name for China’s national internet censorship system. It filters traffic between mainland China and the rest of the world, which is why Google, YouTube and Wikipedia are blocked on Chinese networks. China doesn’t publish how it works or what it blocks, so most of what’s known comes from outside research.
Updated
What it is, and where the name comes from
“Great Firewall” isn’t an official title. It plays on the Great Wall, and a firewall is a system that filters network traffic. The phrase was the title of a June 1997 Wired article by Geremie Barmé and Sang Ye, an early use in print. Researchers trace the system itself to the Golden Shield project of the late 1990s.
Freedom House says it rests on the government’s control of the gateways between China’s networks and the global internet. China’s stated position is in a 2010 white paper: “Within Chinese territory the Internet is under the jurisdiction of Chinese sovereignty.”
- June 1997
A Wired article is titled “The Great Firewall of China”, an early use in print.
- Late 1990s
The Golden Shield project, where researchers trace the system itself.
- 2010
A Chinese government white paper sets out its position on internet sovereignty.
- Nov 2021
A 2023 paper dates its first attempts to spot fully encrypted traffic to here.
- 2025
A paper finds Henan Province running its own extra blocking.
How it works, as far as anyone can tell
China doesn’t publish this, and Freedom House says lists of prohibited sites are kept secret, though they’re sometimes leaked. So what follows comes from researchers’ measurements. Each is from a point in time, and things may have changed since.
False address replies. When your device looks up a blocked site’s address, the firewall sends a fake answer, which often arrives before the real one.
Reading the site name. The start of an encrypted connection usually shows the name of the site you’re opening. If it’s on a blocklist, the firewall ends the connection.
Blocking server addresses. Connections to some internet addresses are blocked outright.
Spotting encrypted traffic. A 2023 paper found that from November 2021 it tried to recognise traffic that looks fully encrypted and block it in real time, on part of the traffic to certain data centres.
It isn’t the same everywhere. A 2024 study describes equipment across China’s border networks, managed centrally, but also saw interference from individual internet providers and cloud companies. A 2025 paper found Henan Province running its own extra blocking on traffic leaving the province.
What it blocks in practice
Freedom House’s 2024 report lists these among the blocked sites and apps:
- Search
- Maps
- Docs
- Drive
- Translate
Social and messaging
- X
- Signal
- Telegram
- YouTube
Reference
- Wikipedia
News and rights groups
- The New York Times
- Amnesty International
- Human Rights Watch
One address at a time: GreatFire’s tests from inside mainland China
google.comBlockedyoutube.comBlockedwikipedia.orgBlockednytimes.comBlockedwww.apple.comConnected
Not everything foreign is blocked, as the www.apple.com result shows.
Blocks also change over time. The UK Foreign Office says access can be restricted around key political events, and Freedom House says VPN blocking tends to tighten before big political events, such as China’s yearly legislative meetings.
What it means for your trip
The blocks apply to traffic on Chinese networks, so how your connection is routed matters, not who you are.
- Hotel Wi-Fi and other Chinese networks
The same blocks apply.
- Some roaming eSIMs
Airalo’s among them, send your data through a network outside mainland China.
- A server of your own
Tunnelz sets one up that only you use. If it’s ever blocked, Replace Server can set up a new one in about 2 minutes, if the app can reach Vultr.
- Do you need a VPN? That has its own guide, including why to set one up before you fly.
- Phone only? Some roaming eSIMs, Airalo’s among them, send your data through a network outside mainland China. VPN or eSIM compares the two.
- Hotel Wi-Fi is a Chinese network, so a laptop or phone on it gets the same blocks. The hotel Wi-Fi guide covers signing in.
Tunnelz runs on an Apple silicon Mac with macOS 14 or later and sets up your own server, which only you use. If your server is ever blocked, Replace Server can set up a new one in minutes, as long as the app can reach Vultr. In China that may take eSIM data or another network (how). Tunnelz for iPhone is coming.
Questions
How many websites does the Great Firewall block?
Does the Great Firewall apply in Hong Kong?
Is it legal to use a VPN in China?
Sources
- Freedom House: Freedom on the Net 2024, China
- Freedom House: Freedom in the World 2026, Hong Kong
- Wired: The Great Firewall of China, by Geremie R. Barmé and Sang Ye (Jun 1997)
- State Council Information Office of China: The Internet in China, white paper (Jun 2010)
- China Daily: China approves amendment to cybersecurity law (29 Oct 2025)
- UK Foreign Office: China travel advice, safety and security
- Hoang et al.: GFWeb, measuring the Great Firewall’s web censorship at scale (USENIX Security, Aug 2024)
- Hoang et al.: How great is the Great Firewall? Measuring China’s DNS censorship (USENIX Security, 2021)
- Bock et al.: Even censors have a backup, China’s double HTTPS censorship middleboxes (FOCI, Aug 2021)
- Wu et al.: How the Great Firewall of China detects and blocks fully encrypted traffic (USENIX Security, 2023)
- Wu et al.: A wall behind a wall, emerging regional censorship in China (IEEE S&P, 2025)
- GreatFire: how its tests work
- GreatFire: google.com blocked in China test results
- GreatFire: youtube.com blocked in China test results
- GreatFire: wikipedia.org blocked in China test results (tested 16 Oct 2026)
- GreatFire: nytimes.com blocked in China test results (tested 29 Oct 2026)
- GreatFire: www.apple.com test results, not blocked (tested 18 Sep 2026)
- Airalo help: staying connected in China, is a VPN required?
- Nomad eSIM: do eSIMs work in China?
- Tunnelz: pricing
- Tunnelz help: your server was blocked